AllocInstanceData
Compress
CompressBegin
CompressEnd
CompressFramesInfo
CompressQuery
DllMain
FreeInstanceData
SetCPUID
SetScalability
Static task
static1
Behavioral task
behavioral1
Sample
NEAS.2a3adef9f1d7f3d6c73872a0b3cb6980_JC.dll
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.2a3adef9f1d7f3d6c73872a0b3cb6980_JC.dll
Resource
win10v2004-20231020-en
Target
NEAS.2a3adef9f1d7f3d6c73872a0b3cb6980_JC.exe
Size
335KB
MD5
2a3adef9f1d7f3d6c73872a0b3cb6980
SHA1
5b737ab0db534b102944740a1dcd3b37f242153e
SHA256
3f5f0af0bb0f93d0d5fe8824ad30eb2e826615753c35fa3a8f725d3960e6a75a
SHA512
053a5331b9ea7022540b14bdd6e09b5a5e695638346b9296199a3ec8779420ee17f949a7cf715a3b924b5bf428a0e1d781941718351c2b4d2b51fb7f54f70fa7
SSDEEP
3072:7RZuUjVFRTN1hCXn0iwMwHyaXnTcRJCPjsB8i+Z1gTkXRbS5aE2PFOYCmoRIihpx:VVGwMwpPjw8aK9dihpgRBKN/MM
Checks for missing Authenticode signature.
resource |
---|
NEAS.2a3adef9f1d7f3d6c73872a0b3cb6980_JC.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
FreeEnvironmentStringsA
LocalFree
GlobalAlloc
GlobalFree
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
LocalAlloc
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
HeapDestroy
HeapCreate
VirtualFree
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
HeapFree
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
VirtualAlloc
GetProcAddress
LoadLibraryA
FlushFileBuffers
CloseHandle
SetStdHandle
SetFilePointer
AllocInstanceData
Compress
CompressBegin
CompressEnd
CompressFramesInfo
CompressQuery
DllMain
FreeInstanceData
SetCPUID
SetScalability
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ